eMudhra's Web Security Key Leak: What It Means for Internet Users and Cybersecurity

10/23/2026

The exposure of eMudhra’s private keys could allow for man-in-the-middle attacks if left unpatched on all devices

10/23/2026

Weak cryptographic keys associated with eight intermediate certificate authorities operated by eMudhra could be reverse-engineered, or recovered, potentially allowing the issue of fraudulent...

10/23/2026

A flaw in the generation of eight eMudhra certificates exposed the risk of fraudulent website credentials, with lingering concerns over applications that may not have received the necessary...

10/22/2026

The exposure of eight cryptographic keys linked to eMudhra has put the spotlight on how browsers verify websites and the risks posed by compromised certificate authorities.

10/22/2026

EMudhra security lapse exposes millions to cyber threats after issuing weak digital identity certificates. Discover how browsers blocked vulnerable keys and what website owners must do now to...

10/21/2026

eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the...

10/21/2026

Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication...

10/22/2026

Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to...

10/22/2026

This follows the discovery of eight eMudhra certificate authorities with weak private keys that could potentially have allowed attackers to create fake website certificates and impersonate...

10/22/2026

Indian digital trust services provider eMudhra on Thursday said it would voluntarily withdraw from the global SSL/TLS certificate ​business, following an incident in which its digital certificates...

10/22/2026

Its Indian digital signature and eSign services will continue to operate as usual

10/22/2026

eMudhra has decided to exit the global SSL/TLS certificate business following a recent security incident that drew scrutiny on social media. The digital trust company said on October 22 that its...

10/22/2026

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported...

10/22/2026

The digital trust firm said the business contributes about 1% of global revenue. It will provide affected customers with replacement certificates at no cost while continuing its other digital...

10/22/2026

eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of...

10/22/2026

eMudhra shares tank twenty percent following a major cybersecurity vulnerability involving weak certification authority keys. The Ministry of Electronics and IT investigates the incident while the...

10/22/2026

for example yahoo.co.in — and use the certificate to pretend the website is genuine. This is because when browsers connect to a website and show you a lock saying the connection is secure, they do...

10/22/2026

India’s only certificate issuer trusted by browsers worldwide, eMudhra, is under scrutiny after a researcher found weak security keys in its website certificates. The company calls it a technical...

10/21/2026

Its Indian digital signature and eSign services remain unaffected, while the incident could carry reputational risks, executive vice president Kaushik Srinivasan said.

10/22/2026

The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.

10/22/2026

Says it passed audits and made just a minor mystery error

10/22/2026

From FIPS to facepalm; when the chain of trust is compromised, everything that uses certificates for that trust has to be checked and updated – and that means everything.

10/22/2026

Cybersecurity agency CERT-In warned that the compromised keys could let attackers issue fraudulent certificates for domains they do not control, impersonate legitimate websites and carry out...

10/22/2026

The flaw could have allowed attackers to impersonate websites and make malicious software appear to come from a trusted publisher

10/21/2026

CERT-In says the flaw could also allow malicious software to be passed off as coming from a trusted publisher.

10/22/2026

8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys

10/21/2026

Eight eMudhra intermediate certificates had weak private keys that could enable website impersonation, prompting Google, Mozilla and Cloudflare to act to protect internet users

10/21/2026

CERT-In has warned that eight eMudhra intermediate CA certificates were compromised due to weak cryptographic keys. Here's how fraudulent certificates could threaten encrypted communications and...

10/21/2026

Google and Mozilla have blocked intermediate certificates issued by Bengaluru-based eMudhra after a researcher showed their private keys could be recovered because they were generated with little...

10/21/2026

Eight eMudhra CA keys were compromised. Chrome, Firefox, Apple and Microsoft blocked them. Here is what happened, the risks and how to secure systems.

10/21/2026

Private keys were recoverable almost instantly, potentially enabling attackers to impersonate trusted websites.

10/21/2026

Google, Mozilla, Apple and Microsoft blocked 8 digital certificates issued by Indian cybersecurity firm eMudhra Limited after they were found to have critically weak secret keys.

10/21/2026

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those...

10/21/2026

MeitY has ordered a probe into the eMudhra security incident involving eight compromised digital certificates. The ministry said the impact on Indian websites and apps was limited and clarified...

10/21/2026

CERT-In and MeitY investigate an eMudhra security incident involving compromised private keys, as shares fall 20% and global tech giants respond.

10/21/2026

MeitY has formed a special team to probe eMudhra’s certificate flaw, as Google & Mozilla block affected certificates & shares plunge 20%. The ministry says Indian eSign services remain unaffected.